Former Hamat Security Manager Charged with Hundreds of Cyber Offenses

Miki Bar, formerly the information security manager at the Hamat Group, a home design and construction company, has been indicted for conducting cyberattacks against 26 companies between 2019 and 2026. The state alleges these attacks caused approximately 1.5 million shekels in damages. The indictment, filed at the Rishon Lezion Magistrate's Court, reveals Bar's primary motive was to track women, including in their homes. Hamat Group has stated that Bar's alleged actions are unrelated to the company's operations.

According to the state, Bar developed malicious software, including "windows malware" and "wesearch malware," using artificial intelligence. These programs were designed to infiltrate and control other people's computers, enabling a wide range of actions. The "wesearch malware" was reportedly more sophisticated and developed after national cyber authorities contacted Bar, suspecting Hamat was among the targets without knowing he was the perpetrator. The malware allowed for data collection, real-time keystroke logging, user activity monitoring, propagation within organizational systems, defense system compromise, operating system alteration and shutdown, cryptocurrency wallet searching, and persistent infection even after a computer was turned off.

Bar is accused of deploying these malicious programs on the computers of 26 companies and the kibbutzim Gazit and Kfar Menachem between February and August of the current year. He allegedly performed 2,400 actions using the "windows malware" and 1,300 actions using the "wesearch malware." The indictment names targeted organizations including Solagreen, RBS, Hamat, Atidim Association, Gindi, FBS Technologies, Blue Square Real Estate, and Yad2.

The state claims Bar's targets were predominantly women, whom he photographed and documented, sometimes including their minor daughters, often not in intimate situations, but also capturing business activities. He faces charges including unauthorized use of software, computer intrusion for illicit purposes, computer virus insertion, privacy violation, theft, and unauthorized software operations. The state is seeking to detain Bar until the proceedings conclude, citing evidence such as the malware found on his computer, his development activities, server links used to operate the malware, thousands of stolen files, victim company statements, testimonies from 12 women he tracked, cyber investigator reports, and Bar's partial confessions.